On Sun, Feb 26, 2017 at 08:16:18PM +0100, Christian Barthel wrote:
> Hi,
>
> I've added the 'vmctl status' view to systat(1). I am not sure if this
> is of general interest.
>
> Any opinions about it?
>
At the first look, it seems to be a good thing.
But from a technical standpoint I agr
Mike Larkin writes:
> On Sun, Feb 26, 2017 at 08:16:18PM +0100, Christian Barthel wrote:
>> Hi,
>>
>> I've added the 'vmctl status' view to systat(1). I am not sure if this
>> is of general interest.
>>
>> Any opinions about it?
>
> I don't know what to think about systat using imsg to ta
On Mon, Feb 27, 2017 at 10:22:03PM +0100, Alexander Bluhm wrote:
> On Sun, Feb 26, 2017 at 10:56:16AM +0100, Claudio Jeker wrote:
> > This diff works for me but I did not test each and every protocol (TCP,
> > UDP, ICMP, AF_UNIX work).
>
> I am currently running it with all regression tests.
>
>
On Sun, Feb 26, 2017 at 08:16:18PM +0100, Christian Barthel wrote:
> Hi,
>
> I've added the 'vmctl status' view to systat(1). I am not sure if this
> is of general interest.
>
> Any opinions about it?
I don't know what to think about systat using imsg to talk to other
daemons.
Is there a
1 week bump.
See prior mail for patch.
Sorry if bumping your own patch is not kosher, this is my first patch.
--
Scott Cheloha
Various people have reported seeing kernel diagnostic assertion
"ccb->ccb_xa.state == ATA_S_ONCHIP" panics with ahci. In short, this happens
when a queued command fails, we ask the device which command fails, and it
gives us the wrong answer. The ccb_xa.state assertion fails if the command
was no
> I wrote this little tool for vmd that is not intended for the tree,
> but will eventually go into ports (it uses kcgi which is not in base).
Have you thought of writing this in a secure language like Rust or
Swift? Writing cgi stuff in C seems just asking for trouble.
On Sun, Feb 26, 2017 at 10:56:16AM +0100, Claudio Jeker wrote:
> This diff works for me but I did not test each and every protocol (TCP,
> UDP, ICMP, AF_UNIX work).
I am currently running it with all regression tests.
> Also not sure if I should renumber the PRU_* defines... in a way this can
> b
> I've now gone back and forth on this diff a few times. I like the
> simplfication of allocpid(), but then it seems like deck-chair shuffling
> as the test is just moved to another function.
To me, it also feels like deckchair rearrangement. A special startup
case condition (pid 1, and pid 0
On Mon, Feb 27, 2017 at 11:05:55AM +0100, Reyk Floeter wrote:
> Hi,
>
> this is the last diff of the series. It allows users to start or stop
> VMs and to access the console accordingly. In order to make it work,
> VMs have to be pre-configured with the new "owner" option in vm.conf
> or an incl
On 2017/02/28 00:30, Jonathan Gray wrote:
> On Mon, Feb 27, 2017 at 10:50:35AM +, Stuart Henderson wrote:
> > On 2017/02/27 21:37, Jonathan Gray wrote:
> > > On Mon, Feb 27, 2017 at 09:54:33AM +, Stuart Henderson wrote:
> > > > Using the current example (512-byte blocks):
> > > > 18874368 b
On Mon, Feb 27, 2017 at 10:50:23AM +0100, Reyk Floeter wrote:
> This is a no-brainer. But for the sake completeness: OK?
>
> Sort vm.conf(5) config options alphabetically
>
ok mlarkin
> diff --git usr.sbin/vmd/vm.conf.5 usr.sbin/vmd/vm.conf.5
> index ccb59e7..9a48a51 100644
> --- usr.sbin/
On Mon, Feb 27, 2017 at 10:48:48AM +0100, Reyk Floeter wrote:
> Hi,
>
> I have a serious of vmd diffs, see the 5th one for the interesting part.
> The first one is rather cosmetic, but will be needed for the status output.
>
> Use fmt_scaled(3) in vmctl status output to print curmem/maxmem
>
On Mon, Feb 27, 2017 at 12:00:30PM -0700, Theo de Raadt wrote:
> > I think putting these in libutil is a good idea. tmux could use
> > them. I'd like to have openptmfd() as you suggest as well - it'd be nice
> > to hide PATH_PTMDEV as well as the PTMGET.
> >
> > Life would be a lot easier for port
Running 5 February amd64 snapshot on VMWare.
OpenBSD r1.mwlucas.org 6.0 GENERIC#162 amd64
Trying to use relayd's filtering on query strings.
According to the man page, I can block or pass specific query terms,
and values of those terms. Blocking the whole term works, but matching
the query valu
> To fully abstract /dev/ptm in libutil, the API below would have to be
> extended to have another function to open /dev/ptm in libutil as well,
> eg. (better names would be desired):
>
> fd = openptmfd()
> pledge()
> fdopenpty(fd, ...)
> fdopenpty(fd, ...)
> fdopenpt
And moments later, it hits me:
pass request query "foo" value "bar"
parses and works.
The relayd.conf man page is in wrong.
==ml
--
Michael W. LucasTwitter @mwlauthor
nonfiction: https://www.michaelwlucas.com/
fiction: https://www.michaelwarrenlucas.com/
blog: http://blather.mic
> I think putting these in libutil is a good idea. tmux could use
> them. I'd like to have openptmfd() as you suggest as well - it'd be nice
> to hide PATH_PTMDEV as well as the PTMGET.
>
> Life would be a lot easier for portable if there was fdforkpty() as
> well.
I agree.
Are the -portable ver
Hi
I think putting these in libutil is a good idea. tmux could use
them. I'd like to have openptmfd() as you suggest as well - it'd be nice
to hide PATH_PTMDEV as well as the PTMGET.
Life would be a lot easier for portable if there was fdforkpty() as
well.
On Mon, Feb 27, 2017 at 07:00:03PM +0
Hi,
I wrote this little tool for vmd that is not intended for the tree,
but will eventually go into ports (it uses kcgi which is not in base).
Summary: It allows to configure VMs on vmd in a cloud-init compatible
way. I basically use it to test images that go out into the "real
public cloud" lat
On Mon, Feb 27, 2017 at 10:19:28AM -0700, Theo de Raadt wrote:
> > On Mon, Feb 27, 2017 at 10:55:31AM +0100, Reyk Floeter wrote:
> > > The following diff is not really needed without just yet, but:
> > > - openening /dev/ptm in advance might allow better pledge in the future
> > > - customizing "op
> On Mon, Feb 27, 2017 at 10:55:31AM +0100, Reyk Floeter wrote:
> > The following diff is not really needed without just yet, but:
> > - openening /dev/ptm in advance might allow better pledge in the future
> > - customizing "openpty" will allow to do what we need next
> > Since openpty(4) is libut
On Mon, Feb 27, 2017 at 01:51:58PM +0100, Klemens Nanni wrote:
> no is the default, not (yes or no).
>
fixed, thanks.
jmc
> diff --git a/usr.bin/ssh/ssh_config.5 b/usr.bin/ssh/ssh_config.5
> index 016adbc7343..799af3a4190 100644
> --- a/usr.bin/ssh/ssh_config.5
> +++ b/usr.bin/ssh/ssh_config.5
>
On Mon, Feb 27, 2017 at 10:50:35AM +, Stuart Henderson wrote:
> On 2017/02/27 21:37, Jonathan Gray wrote:
> > On Mon, Feb 27, 2017 at 09:54:33AM +, Stuart Henderson wrote:
> > > Using the current example (512-byte blocks):
> > > 18874368 bytes transferred in 113.823 secs (165821 bytes/sec)
no is the default, not (yes or no).
diff --git a/usr.bin/ssh/ssh_config.5 b/usr.bin/ssh/ssh_config.5
index 016adbc7343..799af3a4190 100644
--- a/usr.bin/ssh/ssh_config.5
+++ b/usr.bin/ssh/ssh_config.5
@@ -1147,7 +1147,7 @@ However, this option disables host authentication for
localhost.
The argu
On 2017/02/27 21:37, Jonathan Gray wrote:
> On Mon, Feb 27, 2017 at 09:54:33AM +, Stuart Henderson wrote:
> > Using the current example (512-byte blocks):
> > 18874368 bytes transferred in 113.823 secs (165821 bytes/sec)
> >
> > Using bs=1m like we suggest in "Creating a bootable USB key using
On Mon, Feb 27, 2017 at 11:14:13AM +0100, Jeremie Courreges-Anglas wrote:
> "Peter J. Philipp" writes:
>
> > On Mon, Feb 27, 2017 at 10:26:48AM +0100, Peter J. Philipp wrote:
> >> I had a patch somewhere for TSIG as well somewhere, give me some time to
> >> find it. TSIG can secure the channel a
On Mon, Feb 27, 2017 at 09:54:33AM +, Stuart Henderson wrote:
> Using the current example (512-byte blocks):
> 18874368 bytes transferred in 113.823 secs (165821 bytes/sec)
>
> Using bs=1m like we suggest in "Creating a bootable USB key using a
> Un*x-like system":
> 18874368 bytes transferred
On Mon, Feb 27, 2017 at 10:55:31AM +0100, Reyk Floeter wrote:
> The following diff is not really needed without just yet, but:
> - openening /dev/ptm in advance might allow better pledge in the future
> - customizing "openpty" will allow to do what we need next
> Since openpty(4) is libutil and not
"Peter J. Philipp" writes:
> On Mon, Feb 27, 2017 at 10:26:48AM +0100, Peter J. Philipp wrote:
>> I had a patch somewhere for TSIG as well somewhere, give me some time to
>> find it. TSIG can secure the channel as well, but my implementation wasn't
>> all that pretty.
>
> Here is the patch, it w
On Mon, Feb 27, 2017 at 10:52:14AM +0100, Reyk Floeter wrote:
> Reminder: using IMSG_SIZE_CHECK() in user-facing imsg handlers is a
> bad thing as an invalid imsg would kill the daemon (via fatal).
>
> OK?
>
> Add size checks for imsg received over the control socket.
>
> Additionall
Hi,
in comparison to my usual diffs this is actually amd64 and not arm64.
I'm surprised this didn't come up earlier, but I think the for-loop is a
bit wrong. What the code is supposed to be doing is going over each
device path node for the loaded image, which is supposed to be the path
to the de
ok eric@
On Sun, Feb 26, 2017 at 10:58:07PM +0100, Jeremie Courreges-Anglas wrote:
>
> Fine with me, here's a diff to introduce as_flags only, still on top of
> the RES_USE_DNSSEC diff.
>
>
> diff -x CVS -pruN asr.1/asr.c asr/asr.c
> --- asr.1/asr.c Sat Feb 25 17:57:40 2017
> +++ asr/asr.
Hi,
this is the last diff of the series. It allows users to start or stop
VMs and to access the console accordingly. In order to make it work,
VMs have to be pre-configured with the new "owner" option in vm.conf
or an included file.
1. Add a "owner user[:group]" in your vm block of vm.conf, eg.
The following diff is not really needed without just yet, but:
- openening /dev/ptm in advance might allow better pledge in the future
- customizing "openpty" will allow to do what we need next
Since openpty(4) is libutil and not libc, it should be fine not using it.
OK?
Replace openpty(3) wi
Using the current example (512-byte blocks):
18874368 bytes transferred in 113.823 secs (165821 bytes/sec)
Using bs=1m like we suggest in "Creating a bootable USB key using a
Un*x-like system":
18874368 bytes transferred in 2.894 secs (6521502 bytes/sec)
OK to change it?
Index: arm64/prep
==
Reminder: using IMSG_SIZE_CHECK() in user-facing imsg handlers is a
bad thing as an invalid imsg would kill the daemon (via fatal).
OK?
Add size checks for imsg received over the control socket.
Additionally, make sure that vmd never fatal()s when receiving an
invalid imsg from a
This is a no-brainer. But for the sake completeness: OK?
Sort vm.conf(5) config options alphabetically
diff --git usr.sbin/vmd/vm.conf.5 usr.sbin/vmd/vm.conf.5
index ccb59e7..9a48a51 100644
--- usr.sbin/vmd/vm.conf.5
+++ usr.sbin/vmd/vm.conf.5
@@ -108,11 +108,6 @@ is specified.
Do not start
Hi,
I have a serious of vmd diffs, see the 5th one for the interesting part.
The first one is rather cosmetic, but will be needed for the status output.
Use fmt_scaled(3) in vmctl status output to print curmem/maxmem
This matches the accepted input in vmctl start and vm.conf that
On Mon, Feb 27, 2017 at 10:26:48AM +0100, Peter J. Philipp wrote:
> I had a patch somewhere for TSIG as well somewhere, give me some time to
> find it. TSIG can secure the channel as well, but my implementation wasn't
> all that pretty.
Here is the patch, it would need fixing up, and it only woul
On Mon, Feb 27, 2017 at 10:19:52AM +0100, Jeremie Courreges-Anglas wrote:
> > Thanks for considering my patch. OpenBSD tremendously improves with this
> > work of yours, I'm all for it! However to make use of this DNSSEC mode,
> > the channel to the recursive DNS server has to be absolutely sec
"Peter J. Philipp" writes:
> On Mon, Feb 27, 2017 at 12:35:33AM +0100, Jeremie Courreges-Anglas wrote:
>> Setting the AD flag for a query is possible, however those semantics are
>> newer than the EDNS0 extension. As far as I know, rfc6840 introduced
>> AD=1 for queries in 2013, whereas rfc3225
On Mon, Feb 27, 2017 at 08:08:16PM +1100, Jonathan Gray wrote:
> There is only one with "ti,edma3-tpcc".
Geez. It may be time to increase my font size.
Index: conf/GENERIC
===
RCS file: /cvs/src/sys/arch/armv7/conf/GENERIC,v
retrievi
On Mon, Feb 27, 2017 at 04:05:45AM -0500, Ian Sutton wrote:
> On Mon, Feb 27, 2017 at 07:59:07PM +1100, Jonathan Gray wrote:
> > On Mon, Feb 27, 2017 at 03:34:35AM -0500, Ian Sutton wrote:
> > > This patch changes edma(4) to attach via device tree and re-enables it.
> >
> > Looks like the line wra
On Mon, Feb 27, 2017 at 07:59:07PM +1100, Jonathan Gray wrote:
> On Mon, Feb 27, 2017 at 03:34:35AM -0500, Ian Sutton wrote:
> > This patch changes edma(4) to attach via device tree and re-enables it.
>
> Looks like the line wrapping got mangled.
Yes, I had just sent a fixed version :) oops
> I
On Mon, Feb 27, 2017 at 03:55:12AM -0500, Ian Sutton wrote:
> Previous patch was malformed, d'oh.
>
> Index: conf/GENERIC
> ===
> RCS file: /cvs/src/sys/arch/armv7/conf/GENERIC,v
> retrieving revision 1.71
> diff -u -p -r1.71 GENERIC
On Mon, Feb 27, 2017 at 03:34:35AM -0500, Ian Sutton wrote:
> This patch changes edma(4) to attach via device tree and re-enables it.
Looks like the line wrapping got mangled.
I don't see the point in testing ti,hwmods in match.
>
>
> Index: conf/GENERIC
> =
Previous patch was malformed, d'oh.
Index: conf/GENERIC
===
RCS file: /cvs/src/sys/arch/armv7/conf/GENERIC,v
retrieving revision 1.71
diff -u -p -r1.71 GENERIC
--- conf/GENERIC23 Jan 2017 22:43:17 - 1.71
+++ conf/GENE
On Mon, Feb 27, 2017 at 12:35:33AM +0100, Jeremie Courreges-Anglas wrote:
> Setting the AD flag for a query is possible, however those semantics are
> newer than the EDNS0 extension. As far as I know, rfc6840 introduced
> AD=1 for queries in 2013, whereas rfc3225 specifies the DO flag since
> 2001
On Mon, Feb 27, 2017 at 08:46:40AM +0100, Jeremie Courreges-Anglas wrote:
> Jeremie Courreges-Anglas writes:
>
> > This flag is useful for software that wants to rely on the resolver to
> > perform DNSSEC validation. Among the use cases there are DANE and SSHFP
> > records, and the obvious inter
On Sun, Feb 26, 2017 at 10:35:17PM -0500, Dale Rahn wrote:
> Switch agtimer from physical timer to virtual timer.
>
> This diff makes the arm generic timer for arm64 use the virtual
> timer instead of the physical timer.
>
> Linux uses the virtual timer in the kernel unless it is operating in
> h
This patch changes edma(4) to attach via device tree and re-enables it.
Index: conf/GENERIC
===
RCS file: /cvs/src/sys/arch/armv7/conf/GENERIC,v
retrieving revision 1.71
diff -u -p -r1.71 GENERIC
--- conf/GENERIC23 Jan 2017 2
>>> Philip Guenther 27-Feb-17 06:09 >>>
:
> I've now gone back and forth on this diff a few times. I like the
> simplfication of allocpid(), but then it seems like deck-chair shuffling
> as the test is just moved to another function.
>
> But eliminating the magic-at-a-distance randompid frobbing
53 matches
Mail list logo